Aperçu
Proactive AiTM infrastructure intelligence from Lab539, imported as STIX 2.1 indicators and observables.
Imports Adversary-in-the-Middle (AiTM) infrastructure from the Lab539 AiTM Feed as STIX 2.1 indicators and observables. Lab539 proactively hunts for AiTM infrastructure used in credential theft and session hijacking attacks, providing real-time intelligence on both frontend and backend adversary infrastructure. Each detection event is imported as an indicator with linked IP address and domain name observables, marked TLP:AMBER. Requires a Lab539 AiTM Feed API key.